Reading up on package-management

Homebrew 6.0.0 introduces `brew trust` and other improvements, with the community praising the project's longevity and Mike's maintainership.

Go's module proxy and transparency log can be repurposed to fetch and verify Ruby gems with better integrity guarantees than RubyGems itself.

Using Git as a package manager backend causes performance and scaling problems as ecosystems grow, leading to workarounds like proxies and sparse checkouts.

Package managers that use git as a database for registry data inevitably hit scaling limits, forcing migrations to HTTP-based or CDN-backed solutions.